1. 首先按下图所示搭建网络拓扑图

2017-07-11 151425-001.png

• Server1 服务器
  IP: 192.168.20.101/24
  GATEWAY: 192.168.20.2
  DNS: 192.168.20.2

• Server2 服务器
  IP: 192.168.20.102/24
  GATEWAY: 192.168.20.2
  DNS: 192.168.20.2

• Client 的IP, DNS 等地址通过DHCP服务获得

2. Server1上安装、配置DHCP服务

2.1. 将Server1的网络地址配置为静态地址, 修改文件/etc/sysconfig/network-scripts/ifcfg-eth0后重启网络服务

• 修改网络配置文件

  [zb01@zb01 Desktop]$ cat /etc/sysconfig/network-scripts/ifcfg-eth0 
  DEVICE=eth0
  HWADDR=00:0C:29:40:FD:FE
  TYPE=Ethernet
  UUID=3ce1f7dd-97af-44fa-942d-e0f988ec5842
  ONBOOT=yes
  NM_CONTROLLED=yes
  BOOTPROTO=static IPADDR=192.168.20.101 NETMASK=255.255.255.0 GATEWAY=192.168.20.2 DNS1=192.168.20.2

• 重启网络服务

  [zb01@zb01 Desktop]$ service network restart

2.2 安装DHCP

[root@zb01 ~]# yum -y install dhcp

2.3 对于CentOS6系统需指定DHCP服务监听的网卡，在此指定为eth0，即DHCPARGS=eth0

[root@zb01 ~]# cat /etc/sysconfig/dhcpd # Command line options here DHCPDARGS=eth0

2.4 配置DHCP，在/etc/dhcp/dhcpd.conf中配置dhcp服务分发地址的网段及地址池，域名等

[root@zb01 ~]# cat /etc/dhcp/dhcpd.conf # # DHCP Server Configuration file. #   see /usr/share/doc/dhcp*/dhcpd.conf.sample #   see 'man 5 dhcpd.conf' # subnet 192.168.20.0 netmask 255.255.255.0 {
    range 192.168.20.200 192.168.20.220;
    option domain-name-servers 192.168.20.102;
}

2.5 关闭防火墙，此处直接关闭，若熟悉iptables配置的，配置而不是关闭

[root@zb01 ~]# service iptables stop

2.6 启动DHPC服务

[root@zb01 ~]# service dhcpd start Starting dhcpd:

2.7. Clinet客户端测试是否能通过Server1的DHPC服务获得IP地址，重启客户端网络服务,并查看eth0网卡的地址

Shutting down loopback interface:                          [  OK  ]
Bringing up loopback interface:                            [  OK  ]
Bringing up interface eth0:  Active connection state: activating
Active connection path: /org/freedesktop/NetworkManager/ActiveConnection/9 state: activated
Connection activated
                                                           [  OK  ]
[root@localhost ~]# ifconfig eth0 eth0      Link encap:Ethernet  HWaddr 00:0C:29:62:90:70 inet addr:192.168.20.201 Bcast:192.168.20.255 Mask:255.255.255.0 inet6 addr: fe80::20c:29ff:fe62:9070/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500 Metric:1 RX packets:24628 errors:0 dropped:0 overruns:0 frame:0 TX packets:9427 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:35293902 (33.6 MiB)  TX bytes:579888 (566.2 KiB)

3. Server1上安装配置TFTP服务(tftp-server)， 在Clinet客户端上安装TFTP客户端（tftp）

3.1 安装TFTP服务和xinetd守护进程

[root@zb01 ~]# yum -y install tftp tftp-server [root@zb01 ~]# yum -y install xinetd

3.2 通过chkconfig 命令让dhcpd,xinetd开机启动

[root@zb01 ~]# chkconfig dhcpd on [root@zb01 ~]# chkconfig xinetd on [root@zb01 ~]# chkconfig --list dhcpd dhcpd 0:off 1:off 2:on 3:on 4:on 5:on 6:off [root@zb01 ~]# chkconfig --list xinetd xinetd 0:off 1:off 2:on 3:on 4:on 5:on 6:off

3.3 启动xinetd服务，centos6上启动的是xinetd而不是dhcpd喔。。

[root@zb01 ~]# service xinetd start Starting xinetd:                                           [  OK  ]

3.4 同样关闭防火墙

service iptables stop

3.5 在默认的共享路径/var/lib/tftpboot/路径下新建测试文件1.txt, 随便写入一些内容做测试

[root@zb01 ~]# ls /var/lib/tftpboot/1.txt 
/var/lib/tftpboot/1.txt
[root@zb01 ~]# cat /var/lib/tftpboot/1.txt CentOS01 test TFPT File You are sucessfully

3.6 检查TFTP服务端口运行状态

[root@zb01 ~]# netstat -tulnp | grep :69 udp 0 0 0.0.0.0:69 0.0.0.0:* 4250/xinetd

3.7 在Clinet客户端上安装TFTP客户端

[root@localhost ~]# yum -y install tftp

3.8 关闭客户端防火墙

[root@localhost ~]# service iptables stop

3.9 测试客户端是否能够获取TFTP服务器上共享的文档
ftp IP
get FileName ；下载文件
q ;退出

[root@localhost ~]# tftp 192.168.20.101 tftp> get 1.txt
tftp> q
[root@localhost ~]# cat 1.txt CentOS01 test TFPT File
You are sucessfully

4. 在Server2上安装BIND(DNS协议的一种实现方式）

4.1 安装BIND(Berkeley Internet Name Daemon), 需安装bind, bind-utils, bind-libs, 默认bind-utils 和bind-libs已安装，只需安装bind即可，如下图所示

[root@zb01 ~]# yum list bind* Loaded plugins: fastestmirror, refresh-packagekit, security
Loading mirror speeds from cached hostfile
 * base: mirrors.btte.net
 * extras: mirrors.btte.net
 * updates: mirrors.aliyun.com
Installed Packages
bind-libs.x86_64 32:9.8.2-0.62.rc1.el6                        @anaconda-CentOS-201703281317.x86_64/6.9 bind-utils.x86_64 32:9.8.2-0.62.rc1.el6                        @anaconda-CentOS-201703281317.x86_64/6.9 Available Packages
bind.x86_64

安装bind

yum -y install bind

4.2 bind 的配置文件及区域数据库文件路径

• 配置文件路径：
  /etc/named.conf
  /etc/named.rfc1912.zones

• 区域数据库文件路径
  /var/named/

  先在/etc/named.conf 或/etc/named.rfc1912.zones中定义区域，然后在/var/named目录下新建区域数据库解析文件，并将该文件属组改为named

4.3 在/etc/named.conf 定义区域zhubiao.com,

[root@zb02 ~]# cat /etc/named.conf options {
    listen-on port 53 {192.168.20.102; };  此处将监听地址改为eth0网卡地址
    directory "/var/named/";  区域数据库文件路径
    allow-query { 192.168.20.0/24;};  允许客户端查询域名的地址范围
};

zone "zhubiao.com" IN {
    type master;  主DNS服务器
    file "zhubiao.com.zone";  区域数据库文件名，此处为相对路径
};

4.4 在/var/named/下建立解析数据库

[root@zb02 ~]# cat /var/named/zhubiao.com.zone  $TTL 86400 若RR（Recourse Record）中未定义TTL则用此TTL

@ IN SOA zb02.zhubiao.com. root.zhubiao.com. ( 20170711 ;serial 3600 ;reflesh 1800 ;retry 604800 ;expire 86400 ;Minium
)   

@ IN NS zb02.zhubiao.com.    
zb02.zhubiao.com. IN A 192.168.20.102 www.zhubiao.com. IN A 192.168.20.102 web.zhubiao.com. IN CNAME www.zhubiao.com.

4.5 修改区域数据库文件zhubiao.come.zone属组为named

chown :named /var/named/zhubiao.come.zone

4.5 使用named-checkconf 和 named-checkzone 分别检测named.conf 和 zhubiao.come.zone是否配置正确，若未抱错如下所示，则正确

[root@zb02 ~]# named-checkconf /etc/named.conf [root@zb02 ~]# named-checkzone zhubiao.com /var/named/zhubiao.com.zone  zone zhubiao.com/IN: loaded serial 20170711 OK

4.6 关闭防火墙

service iptables stop

4.8 启动DNS服务（此处服务名为named, 不是bind或dns喔。。。）

[root@zb02 ~]# service named start Starting named:

4.7 测试客户端是否能够通过Server2(DNS)解析www.zhubiao.com

• 首先，查看Client客户端DNS地址是否纸箱Server2 即DNS地址是否为192.168.20.102

  [root@localhost ~]# cat /etc/resolv.conf  # Generated by NetworkManager nameserver 192.168.20.102

• 然后在Clinet 上执行nslookup www.zhubiao.com, 检测是否能解析出IP地址，如下所示说明已正确解析。

  [root@localhost ~]# nslookup www.zhubiao.com Server: 192.168.20.102 Address: 192.168.20.102#53 Name:    www.zhubiao.com
  Address: 192.168.20.102